$ rpki-client -vvf repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft File: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft (raw, json) Hash identifier: y0FIsnBkK3hGFcKsVkXYMjefXB4BqXq9ZgsvWgCWEqc= Subject key identifier: E3:96:D3:88:37:88:50:64:14:3A:86:FC:15:F4:E2:6C:F8:46:6B:FC Authority key identifier: 7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 Certificate issuer: /CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Certificate serial: 0ACD168EF5978B3A62CDCF6ECE26C77E443966F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft Manifest number: 0339 Signing time: Sat 18 Oct 2025 14:30:50 +0000 Manifest this update: Sat 18 Oct 2025 14:25:50 +0000 Manifest next update: Tue 21 Oct 2025 15:21:50 +0000 Files and hashes: 1: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: yN3b6aLARK75R5KMvUSuceVNjELLLGOMFIhCi2LU/yI=) 2: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl (hash: EoJ1BbrP4713eZXKdXaNqczFAUwXYUw4xyxchEbMCNQ=) 3: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: dQbf3sVA4jaVic2L+O9XI1H3j7ymjWLOW6r+meQnacg=) 4: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: 18AbUsVhIGEQ6HCFJXdnQ22A4WQNqI+V6DxuOgi205k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:cd:16:8e:f5:97:8b:3a:62:cd:cf:6e:ce:26:c7:7e:44:39:66:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Validity Not Before: Oct 18 14:25:50 2025 GMT Not After : Oct 21 15:21:50 2025 GMT Subject: CN=E396D38837885064143A86FC15F4E26CF8466BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:b6:ac:ab:e1:d9:bd:0a:43:d6:e8:bb:47: c8:f7:25:b3:78:f1:de:8b:75:10:8a:3f:1a:12:5b: b4:b4:12:ef:f1:7b:df:2b:cc:04:7c:a9:3d:a6:a7: ca:c3:ca:df:7b:49:31:df:6a:8a:db:76:76:28:72: ca:4a:90:ec:23:e4:55:74:0f:57:68:c3:ef:c2:f8: 47:b0:a2:bf:d7:e1:c2:ca:d7:2a:fe:a7:32:e7:88: d6:6e:f0:8e:b1:fe:de:5a:e5:a8:ab:a9:38:66:e0: 86:11:22:a8:6f:15:51:ce:aa:e8:6a:49:77:17:54: 36:52:c1:7c:75:4e:39:a4:94:a6:05:31:5b:94:f4: f8:b2:74:9f:82:87:da:12:c5:52:e5:6c:18:ec:e8: b8:8e:d9:b4:d1:ad:d5:a0:ad:e9:98:84:f3:d4:d1: 02:c4:44:98:55:08:fb:48:b6:7f:a9:30:f0:08:bf: 85:9d:bd:ee:84:3b:6a:ef:95:f1:a2:c4:b6:f3:3c: 84:32:c8:32:c6:b5:fe:70:7f:ed:50:45:02:ce:3e: 24:b6:c7:38:a6:d6:f2:db:ea:0f:cc:11:56:f1:ca: 8f:ef:0f:c9:52:5a:55:60:93:59:b6:94:9a:4b:82: 1c:b4:45:77:3c:51:15:4b:4f:b5:fc:dd:64:bb:b6: 70:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:96:D3:88:37:88:50:64:14:3A:86:FC:15:F4:E2:6C:F8:46:6B:FC X509v3 Authority Key Identifier: keyid:7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:ea:b9:76:27:ca:9e:48:7e:81:09:4c:08:b6:a0:be:84:09: 5d:82:54:1d:f7:1f:a3:de:46:31:44:97:0d:bd:48:12:71:60: 45:bc:f4:e7:92:99:fc:b8:f8:7e:3b:f7:7c:52:dd:84:a2:33: 0b:2a:78:eb:05:90:a4:1d:e1:08:7e:5a:2c:43:ee:af:0e:31: c8:d3:f6:34:52:60:7c:44:ac:76:0f:4f:fe:d4:1e:c4:c5:dd: be:7c:31:7c:f1:6c:b0:bc:36:5f:43:f8:0b:e2:02:45:40:84: 12:ae:6d:7b:e2:9d:ef:96:af:e7:fe:dc:7a:02:f4:d8:5f:35: da:cc:94:1d:cd:8a:51:a3:02:7a:57:a0:d6:00:2f:69:be:ae: 50:d6:fb:69:fe:7a:73:e6:0d:b5:0d:bf:0b:58:5a:b6:9d:95: cc:e3:06:c6:ea:27:39:0a:9b:ac:f7:d0:cb:fc:67:24:3a:03: 24:f8:50:b2:57:a9:e7:a3:43:bc:3a:4e:6d:e7:d9:cd:9a:d7: c5:bc:0f:dd:1f:26:9c:a9:aa:fb:49:b4:ee:e3:1c:7a:b7:3e: 00:87:39:99:19:e3:e9:0a:2a:97:a9:d2:d9:25:29:bb:a9:53: f9:97:44:b4:dc:dc:18:b9:26:5f:57:ca:1c:bb:39:cb:1e:4f: 3c:e0:59:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCs0WjvWXizpizc9uzibHfkQ5ZvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJE Qzk1RkFGNTAeFw0yNTEwMTgxNDI1NTBaFw0yNTEwMjExNTIxNTBaMDMxMTAvBgNV BAMTKEUzOTZEMzg4Mzc4ODUwNjQxNDNBODZGQzE1RjRFMjZDRjg0NjZCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKrasq+HZvQpD1ui7R8j3JbN4 8d6LdRCKPxoSW7S0Eu/xe98rzAR8qT2mp8rDyt97STHfaorbdnYocspKkOwj5FV0 D1dow+/C+Eewor/X4cLK1yr+pzLniNZu8I6x/t5a5airqThm4IYRIqhvFVHOquhq SXcXVDZSwXx1TjmklKYFMVuU9PiydJ+Ch9oSxVLlbBjs6LiO2bTRrdWgremYhPPU 0QLERJhVCPtItn+pMPAIv4Wdve6EO2rvlfGixLbzPIQyyDLGtf5wf+1QRQLOPiS2 xzim1vLb6g/MEVbxyo/vD8lSWlVgk1m2lJpLghy0RXc8URVLT7X83WS7tnCFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU45bTiDeIUGQUOob8FfTibPhGa/wwHwYDVR0j BBgwFoAUem5/45FS0cwXT2kiFD+q69yV+vUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTJjMTM4Yy0yZTI0LTQ5ZjUtOGFkYS0wMDI3Y2JhN2YxNzgvMC83QTZFN0ZFMzkx NTJEMUNDMTc0RjY5MjIxNDNGQUFFQkRDOTVGQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJEQzk1 RkFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFB RUJEQzk1RkFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/quXYnyp5IfoEJTAi2oL6ECV2CVB33H6Pe RjFElw29SBJxYEW89OeSmfy4+H4793xS3YSiMwsqeOsFkKQd4Qh+WixD7q8OMcjT 9jRSYHxErHYPT/7UHsTF3b58MXzxbLC8Nl9D+AviAkVAhBKubXvine+Wr+f+3HoC 9NhfNdrMlB3NilGjAnpXoNYAL2m+rlDW+2n+enPmDbUNvwtYWradlczjBsbqJzkK m6z30Mv8ZyQ6AyT4ULJXqeejQ7w6Tm3n2c2a18W8D90fJpypqvtJtO7jHHq3PgCH OZkZ4+kKKpep0tklKbupU/mXRLTc3Bi5Jl9Xyhy7OcseTzzgWQw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:54 2025 by rpki-client